git: 101d78aa1606 - main - dns/knot-resolver: Update 5.7.5 => 5.7.6 (security fixes)

From: Vladimir Druzenko <vvd_at_FreeBSD.org>
Date: Mon, 04 Aug 2025 12:49:45 UTC
The branch main has been updated by vvd:

URL: https://cgit.FreeBSD.org/ports/commit/?id=101d78aa16063a5fae120e901383e064e5f54f91

commit 101d78aa16063a5fae120e901383e064e5f54f91
Author:     Michael Grimm <trashcan@ellael.org>
AuthorDate: 2025-08-04 12:44:39 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-08-04 12:49:21 +0000

    dns/knot-resolver: Update 5.7.5 => 5.7.6 (security fixes)
    
    Security
    --------
    - DoS: fix a rare segfault in `resolve` function (!1720)
      Someone controlling the DNS traffic might be able
      to trigger this crash intentionally and too often.
    - DoS: drop a wrong assertion/crash (!1721)
      Someone controlling the DNS traffic will most likely be able
      to trigger this crash intentionally and too often.
    
    Changelog:
    https://gitlab.nic.cz/knot/knot-resolver/raw/v5.7.6/NEWS
    
    - Modify MASTER_SITES in Makefile, see:
    https://lists.nic.cz/hyperkitty/list/knot-resolver-users@lists.nic.cz/thread/H3M2A7NJR6MHRU53MW7P4SW2IWY4QX74/
    - Move cmake from BUILD_DEPENDS to USES.
    
    PR:             288586
    Approved by:    Leo Vandewoestijne <freebsd@dns.company> (maintainer)
    MFH:            2025Q3
---
 dns/knot-resolver/Makefile | 8 +++-----
 dns/knot-resolver/distinfo | 6 +++---
 2 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/dns/knot-resolver/Makefile b/dns/knot-resolver/Makefile
index 5882e8190f7f..bc9d44a9f856 100644
--- a/dns/knot-resolver/Makefile
+++ b/dns/knot-resolver/Makefile
@@ -1,8 +1,7 @@
 PORTNAME=	knot-resolver
-DISTVERSION=	5.7.5
-PORTREVISION=	1
+DISTVERSION=	5.7.6
 CATEGORIES=	dns
-MASTER_SITES=	https://secure.nic.cz/files/knot-resolver/ \
+MASTER_SITES=	https://knot-resolver.nic.cz/release/ \
 		https://dns.company/downloads/knot-resolver/
 
 MAINTAINER=	freebsd@dns.company
@@ -13,7 +12,6 @@ LICENSE=	GPLv3+
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 BUILD_DEPENDS=	bash:shells/bash \
-		cmake:devel/cmake-core \
 		flake8:devel/py-flake8@${PY_FLAVOR} \
 		lua51-cqueues>=20200726_1:devel/lua-cqueues@lua51 \
 		luacheck:devel/lua-luacheck
@@ -26,7 +24,7 @@ LIB_DEPENDS=	libdnssec.so:dns/knot3 \
 		libzscanner.so:dns/knot3
 RUN_DEPENDS=	lua51-cqueues>=20200726_1:devel/lua-cqueues@lua51
 
-USES=		compiler:c11 libedit luajit meson ncurses ninja \
+USES=		cmake:indirect compiler:c11 libedit luajit meson ncurses ninja \
 		pkgconfig python:build shebangfix tar:xz
 USE_CXXSTD=	c++11
 USE_RC_SUBR=	krescachegc kresd
diff --git a/dns/knot-resolver/distinfo b/dns/knot-resolver/distinfo
index 8ebd0e07bcb2..767cd1677285 100644
--- a/dns/knot-resolver/distinfo
+++ b/dns/knot-resolver/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1746521207
-SHA256 (knot-resolver-5.7.5.tar.xz) = 80239cf9aa92599d9cbad4642dea5520b2ccfbc9c6f968886ea46179cb3cdf66
-SIZE (knot-resolver-5.7.5.tar.xz) = 1924960
+TIMESTAMP = 1754049379
+SHA256 (knot-resolver-5.7.6.tar.xz) = 500ccd3a560300e547b8dc5aaff322f7c8e2e7d6f0d7ef5f36e59cb60504d674
+SIZE (knot-resolver-5.7.6.tar.xz) = 1924840